"Anything assigned to a sandbox has access to resources within the sandbox, but has controlled or no access to resources outside the sandbox. In this manner, activities within the sandbox are controlled to prohibit unintended interactions with resources outside the sandbox."[3]